http://www.ISAserver.org
-------------------------------------------------------
BTDT; if the app thinks "it knows best" you're screwed.
I'll bet that if you get a crapture of this traffic in the failure state,
it's trying to make "GET https://blah"; when it should be making "CONNECT
https://blah";.
Unfortunately, there's no good workaround short of disabling the browser
settings.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Danny
Sent: Friday, October 13, 2006 12:21
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
When the IE proxy settings are enabled the app attempts to utilize those
settings regardless of whether or not the ISA firewall client is enabled.
When the proxy settings are not enabled and the firewall client is enabled,
the app is able to function via the FWC.
On 10/13/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
"does not work"?
Doe is change its behavior based on these settings, or do the
settings have no effect at all?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org <http://isatools.org>
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:
isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Danny
Sent: Friday, October 13, 2006 08:35
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] IE Proxy settings vs. ISA FWC
Up to date WinXP Pro install and ISA 2004 SP1 on Win2003 SP1...
all HTTP and HTTPS connects are restricted to a specific AD group.
A new app that we are testing on the client connects through
HTTP/S and does not work via IE's web proxy settings. Of course, when we
disable the IE proxy settings and enable the FWC (Firewall Client) the app
works fine.
Long-term, if we cannot convince the vendor to fix their app, what
are the pros and cons of disabling IE's proxy settings and using the FWC as
sole interface to authenticate against the ISA proxy/firewall.
Thanks,
...D
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ <
http://www.isaserver.org/articles_tutorials/>
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
CPDE - Certified Petroleum Distribution Engineer CCBC - Certified Canadian
Beer Consumer
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
